Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2; (6) SNMP Research before 16.2; (7) multiple Cisco IOS, CatOS, ACE, and Nexus products; (8) Ingate Firewall 3.1.0 and later and SIParator 3.1.0 and later; (9) HP OpenView SNMP Emanate Master Agent 15.x; and possibly other products relies on the client to specify the HMAC length, which makes it easier for remote attackers to bypass SNMP authentication via a length value of 1, which only checks the first byte.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Net-SNMP认证绕过漏洞
Vulnerability Description
Net-SNMP是一套开源的简单网络管理协议（Simple Network Management Protocol）软件。该软件用于监控网络设备、电脑设备、UPS设备等。 Net-SNMP处理认证时存在漏洞。Net-SNMP的认证代码依赖于用户输入中所指定的HMAC长度读取所要检查的长度。SNMPv3的认证是使用HMAC实现的，如果用户在认证代码字段中提供了单字节的HMAC代码的话，由于仅会检查第一个字节，因此就会有1/256的概率匹配正确的HMAC并通过认证，这大大的提高了暴力猜测的成功率。攻击者可利用
CVSS Information
N/A
Vulnerability Type
N/A